IOC Report
http://customer-easyparkas.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 61
gzip compressed data, from Unix, original size modulo 2^32 2986
downloaded
Chrome Cache Entry: 62
gzip compressed data, from Unix, original size modulo 2^32 18726
downloaded
Chrome Cache Entry: 63
gzip compressed data, from Unix, original size modulo 2^32 5216
downloaded
Chrome Cache Entry: 64
MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 8 bits/pixel
downloaded
Chrome Cache Entry: 65
MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 8 bits/pixel
dropped
Chrome Cache Entry: 66
gzip compressed data, from Unix, original size modulo 2^32 192
downloaded
Chrome Cache Entry: 67
gzip compressed data, from Unix, original size modulo 2^32 2148
downloaded
Chrome Cache Entry: 68
gzip compressed data, from Unix, original size modulo 2^32 16484
downloaded
Chrome Cache Entry: 69
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 70
gzip compressed data, from Unix, original size modulo 2^32 53464
downloaded
Chrome Cache Entry: 71
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 72
gzip compressed data, from Unix, original size modulo 2^32 2981
downloaded
Chrome Cache Entry: 73
gzip compressed data, from Unix, original size modulo 2^32 2986
downloaded
Chrome Cache Entry: 74
gzip compressed data, from Unix, original size modulo 2^32 86462
downloaded
Chrome Cache Entry: 75
gzip compressed data, from Unix, original size modulo 2^32 18726
downloaded
Chrome Cache Entry: 76
gzip compressed data, from Unix, original size modulo 2^32 86522
downloaded
Chrome Cache Entry: 77
gzip compressed data, from Unix, original size modulo 2^32 18483
downloaded
Chrome Cache Entry: 78
MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 8 bits/pixel
downloaded
Chrome Cache Entry: 79
gzip compressed data, from Unix, original size modulo 2^32 2053
downloaded
Chrome Cache Entry: 80
gzip compressed data, from Unix, original size modulo 2^32 2053
downloaded
Chrome Cache Entry: 81
gzip compressed data, from Unix, original size modulo 2^32 35085
downloaded
Chrome Cache Entry: 82
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 83
gzip compressed data, from Unix, original size modulo 2^32 3300
downloaded
Chrome Cache Entry: 84
gzip compressed data, from Unix, original size modulo 2^32 192
downloaded
Chrome Cache Entry: 85
gzip compressed data, from Unix, original size modulo 2^32 10602
downloaded
Chrome Cache Entry: 86
gzip compressed data, from Unix, original size modulo 2^32 16484
downloaded
Chrome Cache Entry: 87
gzip compressed data, from Unix, original size modulo 2^32 53464
downloaded
Chrome Cache Entry: 88
gzip compressed data, from Unix, original size modulo 2^32 2148
downloaded
Chrome Cache Entry: 89
MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 8 bits/pixel
dropped
Chrome Cache Entry: 90
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
downloaded
Chrome Cache Entry: 91
gzip compressed data, from Unix, original size modulo 2^32 5216
downloaded
Chrome Cache Entry: 92
Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
downloaded
Chrome Cache Entry: 93
gzip compressed data, from Unix, original size modulo 2^32 10602
downloaded
Chrome Cache Entry: 94
gzip compressed data, from Unix, original size modulo 2^32 18483
downloaded
Chrome Cache Entry: 95
gzip compressed data, from Unix, original size modulo 2^32 84157
downloaded
Chrome Cache Entry: 96
gzip compressed data, from Unix, original size modulo 2^32 95465
downloaded
Chrome Cache Entry: 97
TrueType Font data, 20 tables, 1st "GDEF", 37 names, Microsoft, language 0x409, Copyright 2016 The Mulish Project Authors (https://github.com/googlefonts/mulish)Mulish ExtraLig
downloaded
There are 28 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1976,i,9595863231139644580,14252017245408727424,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://customer-easyparkas.com/"

URLs

Name
IP
Malicious
http://customer-easyparkas.com/
malicious
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/assets/css/registered-block-styles.min.css?ver=2.0.0
192.185.50.220
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/assets/css/general-block-style.min.css?ver=2.0.0
192.185.50.220
http://customer-easyparkas.com/favicon.ico
192.185.50.220
http://twt.xea.temporary.site/wp-includes/js/dist/interactivity.min.js?ver=6.5.5
192.185.50.220
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/assets/css/backwards-compatibility.min.css?ver=2.0.0
192.185.50.220
http://customer-easyparkas.com/#wp--skip-link--target
http://twt.xea.temporary.site/wp-includes/blocks/social-links/style.min.css?ver=6.5.5
192.185.50.220
https://github.com/googlefonts/mulish)Mulish
unknown
http://www.sansoxygen.comThis
unknown
http://twt.xea.temporary.site/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.css?ver=2.0.0
192.185.50.220
http://twt.xea.temporary.site/wp-includes/blocks/cover/style.min.css?ver=6.5.5
192.185.50.220
http://twt.xea.temporary.site/wp-includes/js/wp-emoji-release.min.js?ver=6.5.5
192.185.50.220
http://twt.xea.temporary.site/wp-includes/js/comment-reply.min.js?ver=6.5.5
192.185.50.220
http://customer-easyparkas.com/
https://1.gravatar.com/avatar/d7a973c7dab26985da5f961be7b74480?s=32&d=mm&r=g
192.0.73.2
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/style.css?ver=2.0.0
192.185.50.220
http://twt.xea.temporary.site/hello-world/
http://twt.xea.temporary.site/sample-page/
http://1.gravatar.com/avatar/d7a973c7dab26985da5f961be7b74480?s=32&d=mm&r=g
192.0.73.2
http://twt.xea.temporary.site/
http://twt.xea.temporary.site/wp-includes/blocks/navigation/view.min.js?ver=6.5.5
192.185.50.220
http://twt.xea.temporary.site/wp-content/plugins/wp-plugin-hostgator/vendor/newfold-labs/wp-module-patterns/assets/build/utilities.js?ver=2.0.0
192.185.50.220
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLMulishExtraLightMulishRomanWeightLightMediumSemi
unknown
http://twt.xea.temporary.site/favicon.ico
192.185.50.220
http://twt.xea.temporary.site/wp-includes/blocks/navigation/style.min.css?ver=6.5.5
192.185.50.220
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/assets/fonts/poppins-v20-latin-600.woff2
192.185.50.220
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/assets/fonts/poppins-v20-latin-700.woff2
192.185.50.220
http://twt.xea.temporary.site/wp-content/themes/yith-wonder/assets/fonts/Mulish-VariableFont_wght.ttf
192.185.50.220
There are 18 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
1.gravatar.com
192.0.73.2
twt.xea.temporary.site
192.185.50.220
www.google.com
142.250.74.196
customer-easyparkas.com
192.185.50.220
fp2e7a.wpc.phicdn.net
192.229.221.95

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
192.185.50.220
twt.xea.temporary.site
United States
192.168.2.4
unknown
unknown
192.0.73.2
1.gravatar.com
United States
142.250.74.196
www.google.com
United States

DOM / HTML

URL
Malicious
http://customer-easyparkas.com/
http://customer-easyparkas.com/#wp--skip-link--target
http://twt.xea.temporary.site/
http://twt.xea.temporary.site/sample-page/
http://twt.xea.temporary.site/hello-world/